CVE-2001-1072

CVE-2001-1072 affects Apache with mod_rewrite enabled on UNIX systems. The vulnerability arises when an attacker can insert extra / characters into the requested path, causing the RewriteRule’s regular expression to fail and allowing the path to bypass RewriteRules. The affected component is mod_...

CVE-2001-1185

CVE-2001-1185 affects FreeBSD 4.4. Some AIO operations may be delayed until after an execve call, allowing a local user to overwrite memory of the new process and gain privileges. The provided documents do not include exploitation details or remediation/fix information.

CVE-2001-1342

Apache httpd before 1.3.20 on Windows and OS/2 is vulnerable to a denial-of-service via a crafted URI containing many slashes or other characters, which causes dereferencing of a NULL pointer in certain functions. The issue leads to a General Protection Fault in a child process when handling the ...

CVE-2001-0899

CVE-2001-0899 concerns the PHP-Nuke Network Tools Add-On. The connected sources confirm that the vulnerability arises in Network Tools 0.2 for PHP-Nuke, where the remote attacker can execute commands on the server via shell metacharacters placed in the $hostinput variable. This leads to arbitrary...

CVE-2001-1132

Vulnerability details (CVE-2001-1132) : Mailman 2.0.x prior to 2.0.6 is vulnerable. During authentication, an empty site or list password is not properly handled when calling the crypt function, enabling remote attackers to gain access to list administrative pages. This is limited to the affected...

CVE-2001-0981

HP CIFS/9000 Server SAMBA A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user...

CVE-2001-0981

CVE-2001-0981 affects HP CIFS/9000 Server (SAMBA) versions A.01.07 and earlier. With the 'unix password sync' option enabled, the server calls passwd without the requesting username, which could cause the password of a different user to be changed. Impact: potential unauthorized password changes....

CVE-2001-0962

The CVE-2001-0962 entry concerns IBM WebSphere Application Server versions 3.02 through 3.53, where session IDs used in cookies are predictable. This predictability enables remote attackers to brute-force session IDs and gain privileges of WebSphere users. The documented impact is privilege escal...

CVE-2001-0929

Cisco IOS Firewall Feature set, aka Context Based Access Control CBAC or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists...

CVE-2001-1002

The CVE-2001-1002 issue affects the DVI print filter (dvips) used by lpd on Red Hat Linux 7.0 and earlier. The default configuration does not run dvips in secure mode when dvips is executed by lpd, which could allow a remote attacker to gain privileges by printing a DVI file containing malicious ...

CVE-2001-0900

The CVE-2001-0900 entry describes a directory traversal in Gallery’s modules.php (Gallery

CVE-2001-1299

Affected software: Zorbat Zorbstats PHP script prior to 0.9. The issue is remote file inclusion via an HTTP request that sets the includedir variable, enabling attackers to include arbitrary files from remote sites. Root cause appears to be insufficient validation of includedir. Impact per source...

CVE-2001-1146

AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack...

CVE-2001-0896

The CVE-2001-0896 entry concerns Inetd on OpenServer 5.0.5. A remote attacker can trigger a denial of service (crash) by issuing a port scan (e.g., with nmap -PO). The connected records (CVE and NVD entries) confirm the affected product and the crash-inducing behavior but do not provide concrete ...

CVE-2001-0900

Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the include parameter...

CVE-2001-1062

CVE-2001-1062 describes a buffer overflow in the mana component of OpenServer 5.0.6a and earlier, enabling local users to execute arbitrary code. The vulnerability is rooted in a buffer overflow condition; no exploitation details, affected versions, or remediation steps are provided beyond the pr...

CVE-2001-1043

The CVE-2001-1043 issue affects ArGoSoft FTP Server 1.2.2.2. A remote attacker can read arbitrary files and directories by uploading a .lnk link file that points to the target file, exploiting a file upload/link handling weakness. Root cause: improper handling of Windows .lnk files during file up...

CVE-2001-1247

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the errorlog function to access the files...

CVE-2001-1177

CVE-2001-1177 affects the Samsung ML-85G GDI printer driver prior to version 0.2.0. The vulnerability arises from a symlink attack on temporary files, allowing a local attacker to overwrite arbitrary files. The impact is described as a local/privilege-bypass style risk with complete confidentiali...

CVE-2001-0961

CVE-2001-0961 describes a buffer overflow in the tab expansion routine of the most pager. The vulnerability lets local or remote attackers execute arbitrary code by viewing a malicious file with most. Debian’s DSA-076-1 and related scans (OpenVAS/Nessus) confirm the issue affecting the most packa...